Receive webhooks from any provider on localhost

Pipehero isn't limited to the built-in providers above — any service that POSTs a webhook works the same way. Point it at your Pipehero URL, and if it signs requests with a standard HMAC scheme, add a custom signature check to get the same ✓/✗ badge as the built-in providers.

1Install Pipehero and start a tunnel

Install the CLI, log in, then expose your local port. You get a stable public URL like myapp.t.pipehero.app.

curl -fsSL pipehero.app/install | sh
pipehero login
pipehero start myapp --port 3000

2Add the endpoint in your provider

In your provider's dashboard, set the webhook (or notification) URL to your Pipehero endpoint.

https://myapp.t.pipehero.app/webhooks/your-provider

3Add a custom signature scheme (optional)

In Pipehero, go to Signature verification → Add secret → Custom, then fill in the header your provider signs with, whether it signs just the body or `{timestamp}.{body}`, and the encoding (hex or base64) — check your provider's webhook docs for these three values.

4Inspect & replay

Every request shows up live in the dashboard (and the local panel at localhost:4140) with headers and body. Hit Replay to re-send it to your localhost — no need to re-trigger the event at the provider. Requests that arrive while your CLI is offline are captured and can be replayed later.

5Verify the signature

Most providers sign either the raw body, or `{timestamp}.{body}`, as HMAC-SHA256 in hex or base64, sent in a custom header. Pipehero's custom scheme covers that shape — enter the header name, payload mode and encoding from your provider's docs and every captured event gets the same ✓ valid / ✗ invalid badge as a built-in provider.

FAQ

My provider isn't in the built-in list — is that a problem?

No. Tunneling and inspection work identically for every provider; only signature verification needs the custom scheme above, and only if you want the badge.

What if my provider doesn't sign webhooks at all?

You can still capture, inspect and replay every request without signature verification — just skip the custom secret step.

What if the signature scheme doesn't fit body / timestamp.body?

Open an issue or reach out — we're adding schemes as they come up. In the meantime you can still capture and replay, just without the automated badge.

Pipehero vs Webhook.site Pipehero vs ngrok

Start debugging webhooks in a minute

Free plan, no credit card. Expose localhost, inspect and replay every webhook.

Get started free